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TITLE: Method and apparatus for authenticating on-line transaction data 
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INVENTOR-INFORMATION: 

NAME CITY STATE ZIP CODE COUNTRY 

Arent; Michael A. Albany CA N/A N/A 

US-CL-CURRENT: 705/44, 705/39 

ABSTRACT: The present invention comprises a method and apparatus for authenticating data 
related to on-line transactions. The invention utilizes a user-customized certification indicator that 
informs a user as to the success or failure of one or more authentication and/or security protocols 
implemented on a user communications access device such as a personal computer, a personal 
digital assistant ("PDA"), an enhanced function telephone, etc. In one or more embodiments, one 
of the components of the indicator is user defined, and locally stored, reducing the likelihood of 
interception and counterfeiting. In one or more embodiments, the indicator components include 
a centrally provided graphic element and a user defined text overlay. When a user initiates an 
electronic transaction, a background validation process is initiated that implements procedures for 
determining the authenticity of data related to the transaction, such as the identity of a transaction 
party. If the validation process determines that the data is authentic, the validation process displays 
a certification indicator comprising the graphic overlaid with the user defined text-string. In 
another embodhnent, the certification indicator mcludes one or more muUi-media components, 
such as, for example, an audio component. 
8 Claims, 10 Drawing figures 
Exemplary Claim Number: 1 
Number of Drawing Sheets: 10 

KWIC 

Detailed Description Text - DETX (11): If it is determined that the merchant is authentic, a 
determination is made at step 260 as to whether any other data related to the transaction needs to 
be certified. Such other data may mclude, for example, the contents of an electronic "wallet" that 
is being displayed, such as electronic payment instruments displayed in the wallet. Data to be 
certified may also include, without limitation, security protocols and electronic payment or transfer 
operations. If there is no additional data to be certified, a certification indicator indicating 
successful certification is displayed to the user at step 270. An example of a certification indicator 
that indicates successful certification is symbol 400 of FIG. 4. In the example of FIG. 4, 
certification indicator 400 is displayed by the user*s access device as a graphic that floats above 
merchant web page 100. Alternatively, certification indicator 400 may be displayed elsewhere, 
such as in the interface of another application program or applet, for example an electronic 
"wallet" applet or application program. 

Detailed Description Text - DETX (111): PAID stamp to reassure user of a successful transaction 



1 



and approval of payment 



Detailed Description Text - DETX (158): The Wallet can also allow online transfers of value from 
one person's payment instrument to some repository destination, such as another person's physical 
payment instrument (smart card) or account that is specified by the user. This transfer interface 
could be an integral part of a multi-functional Wallet or exist as an independent interface 
associated with physical or virtual instruments dedicated to anonymous cash transfer type of use, 
such as with the use of a physical Mondex Card. 

Detailed Description Text - DETX (176): The user can perform administrative functions any time 
the Wallet is open-either during a payment or transfer transaction. In the latter case, the user is 
not necessarily online or conducting a transaction. Each of these functions may bring up its own 
dialog, display area in Wallet, or mode. 

Detailed Description Text - DETX (197): The transaction log contains all information about each 
transaction. These transactions are recorded to the log automatically. The log should have at least 
two levels of information display. The top level lists basic transaction information: type of 
transaction, amount paid/transferred, date/time, receiver of payment/ value transfer, type of 
instrument, transaction ID, class, etc. But each item also can be opened to show the details and 
terms of the transaction, including a receipt for each completed transaction. The user can sort and 
filter the log by different criteria, including date/time, "Completed"/ "Pending" transactions, etc. 
Users should be able to manipulate the transaction log, such as print or fax it. To preserve its 
integrity, users should NOT be allowed to edit the transaction log EXCEPT to delete line items 
of outdated or no longer needed transactions. If users attempt to delete a transaction, they should 
be queried via a confirmation dialog whether they actually intend to delete it or not. 

Detailed Description Text - DETX (221): points of security; e.g., in order to open Wallet, to wake 
up a sleeping wallet, to use an instrument to make a payment or value transfer, etc. Detailed 
Description Text - DETX (255): "Get 500 frequent flier miles if you buy your tickets online " 

Detailed Description Text - DETX (285): Jo, satisfied that she has completely filled in the required 
information, clicks the PAY button. An elapsed time indicator appears to communicate the states 
of the transaction. When the transaction is successfully complete, a confirmation message and a 
receipt with a transaction identity code and other information appears. Finally, the receipt is 
stamped with "PAID. " For further assurance though, Jo opens the transaction log to see if her first 
transaction is listed~and it is. 

Detailed Description Text - DETX (311): 5. A Wallet does NOT automatically disappear when 
a transaction is completed unless the user explicitly exits it or navigates to another site, where the 
user's current Wallet context is not relevant. If users close or exit their Wallets in the process of 
a pay or value transfer transaction, they are queried via a dialog message about the nature of their 
intent. When the Wallet is closed, the user returns to the location and state they were in before 
opening their Wallet. 



